Statement for the record from Renee DiResta, Director of Research, New Knowledge 


Honorable Committee Members - 

My name is Renee DiResta, and I research influence operations and social network 
manipulation. I appreciate the opportunity to submit this written and verbal testimony to 
your committee. 


Over the past decade, disinformation, misinformation, and social media hoaxes have 
evolved from a nuisance into high-stakes information war. Our frameworks for dealing 
with them, however, remain the same - we discuss counter-messaging and 
counter-narratives, falling into the trap of treating this as a problem of false stories 
rather than as an attack on our information ecosystem. We find ourselves in the midst of 
an arms race, in which responsibility for the integrity of public discourse is largely in the 
hands of private social platforms, and determined adversaries continually find new ways 
to manipulate evolving feature sets and circumvent new security measures. It is critical 
to acknowledge that computational propaganda and disinformation is not about 
arbitrating truth, nor is it a question of free speech. Information Warfare is a 
cybersecurity issue, it is an ongoing national security issue, and it must be addressed 
through a collaboration between governments responsible for the safety of their citizens 
and private industry responsible for the integrity of their products and platforms. 


Propaganda and malign narratives have existed for a very long time, but today’s 
influence operations, which co-opt popular social platforms, are materially different - the 
propaganda is shared by our friends, often in the form of highly effective, shareable, 
immediately graspable memes. It is efficiently amplified by algorithms, and the 
campaigns achieve unprecedented scale. To conduct an operation, adversaries 
leverage the entire media ecosystem to push a narrative and manufacture the 
appearance of popular consensus. The operation is planned on one platform, such as a 
messaging or chat board. Content is created, tested, and hosted on others, such as 
Reddit, Pinterest and YouTube. It’s then pushed to platforms like Twitter and Facebook, 
with standing audiences of hundreds of millions of people, and targeted at those most 
likely to be receptive to it. The platform’s trending algorithms are gamed to make the 
content go viral - this often delivers the added benefit of mainstream media coverage, 
increasing attention via traditional media channels including television. If an operation is 
successful and the content gets wide distribution, or a manipulative Page or Group 
gains enough followers, the recommendation engine and search engine will continue to 



serve up the content on an ongoing basis. 


We are here because the Internet Research Agency (IRA) employed this playbook, 
conducting an operation that leveraged our social networks to spread propaganda and 
disinformation directly to American citizens. Their operation likely began sometime in 
2013, continued throughout the 2016 election cycle, and even increased on Instagram 
in 2017. While many accounts were shut down in 2017 as the tech companies began 
their investigations, Twitter accounts and Facebook pages associated with the IRA 
remain active. The IRA content on Facebook and Instagram alone had hundreds of 
millions of engagements; Facebook itself estimates 146 million users across the two 
platforms were affected. The Internet Research Agency’s disinformation campaign was 
conducted on all the major platforms in the social network ecosystem. The presence of 
manipulated content on Facebook and Twitter is well-documented. In the case of 
Alphabet, YouTube, G+, and other properties were leveraged to either host content or to 
support personas. Reddit, Tumblr, and Medium have confirmed that they were misused; 
Twitter’s Vine video app was co-opted as well, and IRA meme boards were discovered 
on Pinterest. Games and music apps were created and pushed to teenagers to 
download. Even popular game Pokemon Go was incorporated into the operation. 
Outside of social platforms, a number of websites were created to host original written 
content, many of which looked very much like citizen journalism-style blogs and think 
tanks. Topics ran the gamut, from social issues to concerns about war, the environment, 
corporate greed, GMOs, energy policy, and immigration. Twitter accounts were created 
to masquerade as local news stations. White House petitions were either created or 
co-opted to engineer a perception of social consensus. Dozens of Facebook Events 
were promoted, and activists were contacted personally via Messenger, to take the 
operation to the streets. 


The Internet Research Agency’s campaign pressed on a variety of socially divisive 
issues, but the primary focus was on racial tension. Despite YouTube’s claim that the 
content attributed to the IRA on its platform was “not targeted to the US or to any 
particular sector of the US population”, it appears that the overwhelming majority of the 
videos we are aware of were related to issues of importance to the black community, 
particularly officer-involved shootings. Hundreds of thousands of Americans liked 
Facebook Pages with names like Blacktivist, Heart of Texas, and Stop All Invaders. The 
percentage of explicitly political content that mentioned candidates by name was small - 
approximately 10% of known content - but the political content targeting both 
right-leaning and left-leaning Americans was unified in its negativity toward the 
candidacy of Secretary Clinton. In pages targeting the left, this included content 



intended to depress voter turnout among black voters, or to paint Secretary Clinton in a 
negative light as compared to candidates Jill Stein or Senator Bernie Sanders. Only the 
social networks that hosted this campaign are in a position to gauge its full impact in 
changing voter attitudes on their respective platforms. However, independent of its 
impact, the fact that it was attempted, went undetected, and achieved such significant 
reach is sufficient cause for concern. 


Although this hearing was convened because of the Internet Research Agency’s 
interference in the 2016 election, Russia was not the first to target American citizens 
with propaganda using the social ecosystem. In 2014, the co-opting of social 
communication infrastructure rose to mainstream awareness in the United States as 
ISIS established a virtual caliphate, using every social app imaginable to push 
propaganda boldly and transparently, using the features of our of social ecosystem in 
precisely the way they were meant to be used: to build an audience and connect with 
followers. This was a visible indication that the tools built to enable marketers and 
messengers and friends to communicate could be co-opted and misused; the ensuing 
debate about what to do about the problem made it apparent to anyone watching that 
no one was in charge, and that American companies, American civil society 
organizations, and the American government were deeply divided on how to respond to 
the threat. That confusion continues even as the threat expands beyond extremists and 
state actors: the Wall Street Journal recently revealed that a private intelligence 
company, Psy-Group, openly marketed their ability to conduct similar types of influence 
operations to impact the 2016 election. 


As the internet has evolved, we’ve seen the consolidation of users into large standing 
audiences on a small handful of social networks. This infrastructure has been a 
phenomenal tool for small businesses to reach customers, and for the previously 
voiceless to find a voice. But like any tool without appropriate safeguards, it can be 
misused. These platforms employ gameable algorithms, and facilitate personalized 
targeting that is enabled by the ongoing collection of extensive amounts of personal 
data. As a result, social networks continue to be the most effective vector to manipulate 
public sentiment and cause lasting damage to our democratic process. To combat this 
evolving threat, we have to address those structural weaknesses and design an 
effective deterrence strategy. 


Individually, several social platforms have begun to take steps to reduce the spread of 
disinformation, by disrupting economic incentive structures, reducing the spread of 



clickbait headlines, and reducing the granularity of targeting criteria that were used to 
push malicious content directly to subsets of the American people. Political ad content 
on Facebook and Twitter is somewhat public now; we look forward to this database 
being searchable via API, better equipping researchers and journalists to understand 
our paid political conversation. Several platforms are beginning to take source quality 
into account, which may help curb the ability of manipulative propaganda websites to 
reach their audience. These steps, several of which were inspired by prior hearings in 
this chamber, are a good start. But as platform features and protections change, 
determined adversaries will develop new tactics. 


In addition to the ongoing exploitation of social divisions, targeting of elections, and 
disinformation about geopolitical events (such as the conflict in Syria), campaigns 
targeting U.S. industry have emerged and are thriving. Influence operations are 
increasingly appealing to a variety of actors: ideological true believers, non-state 
extremists, economically-motivated enterprises, and State Actors. The last of these 
requires a whole-of-government defense strategy, as it’s unlikely that commercial 
platforms will be able to compete with the sophistication of well-resourced and 
motivated hostile foreign government experienced in bypassing common security 
checks. 


The gaps in our ability to combat this type of information warfare became apparent 
while attempting to address ISIS propaganda: the U.S. government was legally 
constrained in its ability to respond, and the social platforms proved slow to act as 
extremist content, assisted by platform targeting algorithms, easily made its way into the 
social feeds of Americans. That wake-up call fell on deaf ears as our adversaries 
prioritized, deployed, and perfected their influence operation capabilities. They were 
able to exploit gaps in our intelligence community's authorities, and take advantage of 
our commitment to civil liberties; this left social platforms in the impossible position of 
having to individually respond to this global threat, which has resulted in the 
implementation of inadequate solutions and self-serving defensive policies on the part 
of those private companies. 


Several years after the threat emerged, the U.S. Government and the tech industry 
respectively took small steps towards combating this threat by establishing the Global 
Engagement Center and the Global Internet Forum to Counter Terrorism. The focus of 
the latter is still solely terrorism, although the Global Engagement Center’s mandate has 
expanded to countering foreign propaganda. The DOJ and NSA & Cyber Command's 



recent announcements that they will prioritize the mitigation and prosecution of this 
activity is a positive sign. However, addressing this asymmetric threat requires a 21st 
century Information Operations Doctrine, the implementation of a global real-time 
detection and deterrence strategy, and the cooperation of private industry, press, law 
enforcement, and the intelligence community. 


The evolution of social media propaganda and influence techniques will bring serious 
threats. We should anticipate an increase in the misuse of less popular and less 
resourced social platforms, and an increase in the use of peer-to-peer messaging 
services. We believe that future campaigns will be compounded by the employment of 
witting or unwitting U.S. Persons through whom these state actors will filter their 
propaganda, in order to circumvent detection by social platforms and law enforcement. 
We should anticipate the incorporation of new technologies, such as videos and audio 
produced by artificial intelligence, to supplement these operations, making it 
increasingly difficult for citizens to trust their own eyes. 


This will be one of the defining threats of our generation. Influence operations exploit 
divisions in our society using vulnerabilities in our information ecosystem. They take 
advantage of America’s commitment to freedom of speech and the free flow of ideas. 
The social media platforms cannot, and should not, be the sole defenders of democracy 
and public discourse. In that light, here are several recommendations we are proposing 
toward achieving the goal of restoring integrity to the information ecosystem: 


First, to address the most pressing short term issue, we recommend immediate 
government action to identify and eliminate malign influence campaigns and to educate 
the public in preparation for the 2018 elections. 

Second, this domestic defense must be complimented by an updated global 10 doctrine 
and international detection and deterrence strategy, with the goal of mitigating foreign 
influence targeting our allies, including the clear delegation of responsibility of this 
activity within the U.S. Government. Taking example from the U.S. Government's cyber 
security response over the past decade, we must implement legislation that defines and 
criminalizes foreign propaganda that targets not just our political process but also 
addresses the targeting of commercial industry and social issues. Empowering law 
enforcement with updated legal tools to investigate and prosecute sophisticated foreign 
propaganda is essential to combatting this threat in the age of information warfare. 

Third, the private tech platforms must be held accountable to ensure that they are doing 



their utmost to manage and mitigate the pervasiveness of disinformation and 
manipulative narratives in our privately-owned public squares. A number of regulatory 
frameworks are on the table, including mandating that automated accounts be labeled, 
limiting high-frequency advertising practices, and curtailing and reporting inauthentic 
accounts. Regardless of which is chosen, and whether these policies are implemented 
voluntarily by platforms (self-regulatory action) or via formal regulation, the incorporation 
of oversight is key. 

Finally, given that this asymmetric persistent threat impacts our social, geo-political, and 
economic spheres, and given the sophistication of its tradecraft, we need new 
structures for cooperation and information sharing between the public and private 
sectors. Formal partnerships between security companies, researchers, and 
government will be essential to defending our values, our democracy, and our society. 


Thank you. 



